Get real-time updates on Telegram
CVE-2026-74496: Linux 3.18
CVE-2026-74496. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00125 (percentile 0.01921), scored 03-Oct-2026.
Affected technology
Linux · 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 0ee628a58d83e571f36ec9f07624d6845e420c50, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before a6fca682cfa2041e31aa72cc397c4a1406eb7468, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before b3f9c3e60aa25453774f899d25b5e61dd0bec1d5, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 99f4d3120b244f92e5df787152041296a2860cb5, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 58835985c035a8333742f829ad7e0889a082f9d3, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 9042867d4701728f0c6527215b11471759904d8f, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before a28d8903bfe76089ea4bbdbff9976965f9ef8107, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before b14361aca6350ff7907b0e9903c7b94dc7d5d4a0
Linux
Linux · 3.18
Linux
Component: Not specified by the source
File: net/ipv4/fou_core.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00126 · percentile 0.02029 · 2026-10-15
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-16 09:43:43.583708+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-16 20:20:42.059737+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-74496.html